This is very cool, but you should not use Cloudflare Tunnels to stream media. This is forbidden by their terms of service (or at the very least not the intended use of Tunnels and they may disable your service). Use Wireguard or Tailscale instead.

https://www.xda-developers.com/cloudflare-tunnels-are-great-...

▲

ZeWaka 10 hours ago | parent | next [-]

Yep, I rent a $5 VPS in my region that I tailscale to for exactly that reason, as well as to un-CGNAT myself.

For an easy GUI solution for the latter, highly recommend Nginx Proxy Manager.

▲

antihero 9 hours ago | parent | prev | next [-]

Can tailscale funnel do custom domains yet?

Personally I'm switching to rathole+traefik, weirdly something I was researching and experimenting with in the early hours of this morning (I have now not slept and have to go to work).

	▲	ffsm8 24 minutes ago \| parent [-]
		Haven't used it like that myself, but stumbled upon this last year https://tailscale.com/docs/concepts/domain-ownership This let's you use your own domain for your tailnet, isn't the funnel but - but isn't it even better? Unless you actually want a publicly routable domain name, then you're back some hosted ingress I guess

▲

watermelon0 10 hours ago | parent | prev | next [-]

Cloudflare Tunnel publicly exposes your services, whereas Wireguard/Tailscale are VPNs.

Tailscale (but not Headscale) offers Funnel, which is a reverse proxy, but you cannot use it with your own domain.

Pangolin is the closest alternative to CF Tunnel, but self-hosted NetBird with reverse proxy functionality can also be used.

	▲	oynqr 9 hours ago \| parent [-]
		The intersection of people who can self host headscale or netbird and those who can not set up their own reverse proxy is probably the empty set.

▲

jasonfrost 3 hours ago | parent | prev [-]

IIRC CF terms were about caching media not streaming media

	▲	AdrienPoupa 2 hours ago \| parent [-]
		Since https://blog.cloudflare.com/updated-tos it is not completely clear if you disable Cloudflare's cache indeed. Still the terms are unclear enough that they could cut you out, and I'd feel uneasy exposing a Jellyfin instance publicly, but that's just me :)